Basavaraj Bendigeri <[EMAIL PROTECTED]> wrote:
>  >   The 'users' file is just one authorization method out of many.  You
>  > allowed LDAP to be used, so when you disallowed the users file, LDAP
>  > was still permitted, and therefore it was used.
> 
> Actually I was under the impression , that the user will be first 
> checked against the users file and if the authorization was successful 
> would then be handed over to LDAP . Isn't that how it is done ?

  If you tell it to do that, yes.  If you tell it NOT to use the
'users' file, then my original comment is correct.

> I have one more question . This is regarding huntgroups . I assume 
> huntgroups is for restricting users to certain groups , right ? 

  No.  Read the comments at the top of the huntgroups file.

> My question here is can I use the huntgroups file in the scenario 
> wherein I am using LDAP as the authorization and authentication backend 
> for radius and at the same time implement the above requirement .

  That may be possible.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to